3f17e2b5db
This change ensures that the VMs and host systems cache apt packges locally which will speed up the boot and deployment process. Change-Id: I234e338b9f1b9f11ff1e81ede8c5717e033fdad8 Signed-off-by: Kevin Carter <kevin.carter@rackspace.com>
36 lines
1.2 KiB
Django/Jinja
36 lines
1.2 KiB
Django/Jinja
#!/usr/bin/env bash
|
|
|
|
apt-get remove --purge snap* lxc* lxd* || true
|
|
|
|
sed -i 's/\(GRUB_CMDLINE_LINUX_DEFAULT=\).*/\1\"\"/g' /target/etc/default/grub
|
|
update-grub
|
|
|
|
sed -i '/PermitRootLogin / s/ .*/ yes/' /etc/ssh/sshd_config
|
|
|
|
mkdir -p /root/.ssh
|
|
chmod 0700 /root/.ssh
|
|
echo "{{ tftp_ssh_key }}" >> /root/.ssh/authorized_keys
|
|
|
|
wget --no-proxy http://{{ tftp_server }}/networking/$(cat /etc/hostname)-bridges.cfg -O /etc/network/interfaces.d/vm-bridges.cfg
|
|
wget --no-proxy http://{{ tftp_server }}/networking/basic-interface.cfg -O /etc/network/interfaces
|
|
|
|
cat > /etc/network/if-up.d/post-up-rules <<EOF
|
|
#!/usr/bin/env bash
|
|
|
|
function iptables_filter_rule_add {
|
|
if ! iptables -w -t $1 -C $2;then
|
|
/sbin/iptables -w -t $1 -I $2
|
|
fi
|
|
}
|
|
|
|
# To ensure ssh checksum is correct
|
|
iptables_filter_rule_add "mangle" "POSTROUTING -p tcp --dport 22 -j CHECKSUM --checksum-fill"
|
|
|
|
# To provide internet connectivity to instances
|
|
iptables_filter_rule_add "nat" "POSTROUTING -o \$(ip route get 1 | awk '{print $5}') -j MASQUERADE"
|
|
|
|
# Make sure instances can talk to the metadata server
|
|
iptables_filter_rule_add "mangle" "POSTROUTING -p tcp --sport 80 -j CHECKSUM --checksum-fill"
|
|
EOF
|
|
chmod + /etc/network/if-up.d/post-up-rules
|